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Abstract 

By a modification of the central definition given in T, we provide 
semantics for public annoucements in subset spaces. We argue that these 
'I revised semantics improve on the original, and we provide a simple sound 

'""J and complete axiomatization of the resulting logic. 

a 

^ 1 Introduction 

1— H The purpose of this note is to offer an interpretation of pubhc annoucements 

^ in subset structures that differs in a small but important way from the account 

given by Wang and Agotnes (hereafter WA) in [1 , from which the primary 
inspiration for this work is drawn. 

g 1.1 Review 

m . . . ^ 

^-H To begin, let us review some of the key notions introduced in p]. The lan- 

guage of (single-agent) public announcement logic, denoted VAC^ is recursively 
• ^ generated by 

^ (p::=p\^ip\(pAip\K(p\[ip]il;, 
H 

Cd where p G prop, the set of primitive propositions. We also denote by £C 

the purely epistemic fragment of VAC obtained by omitting those formulas 
involving public announcements. 

WA observe that the interpretation of the formula [^p]ijj in public announcement 
logic is of the general form 

9Jt, m 1= [ip]i(j iff m, m 1= pre{ip) M' , m |= (1) 

where pre{ip) is the precondition for annomicing ip, while 9Jl' is the result of 
updating the model 9Jt based on the (successful) public announcement of ip. 



1 



Classically, pre{(f) is simply (p itself and Tl' is formed by an update procedure 
that deletes non-tp worlds from 371. However, WA point out that subset struc- 
tures have a model- internal mechanism for representing states of knowledge that 
obtain "after some effort" , and it would be nice to utilize this mechanism to ob- 
tain a representation of SJl' not based on update semantics, that is, without 
altering the model itself. 

Formally, a subset space is a pair {X,0) where X 7^ and O C 2^^, and 
a subset model is a subset space equipped with a function v : prop — ?> 2^ 
specifying the truth sets of the primitive propositions in the usual way. Truth of 
formulas is evaluated with respect to pairs of the form (x, O) where x ^ O E O; 
such pairs are called epistemic scenarios. The set O in an epistemic scenario 
{x, O) is called the epistemic range; it functions like an information set in the 
sense that knowledge statements at {x, O) are evaluated by quantification over 
O. More precisely, given a subset model X ~ {X,0,v), we can interpret £C in 
X as follows: 

X,x,0\=p iff X & v{p) 

X,x,0^^ip iff X,x,0^ip 

X,x,0 \= (fi Ai/j iff X, x,0 \= (fi and X,x,0 \= ip 

X,x,O^Kip iff {yy £ 0){X,y,0 \^ ip). 

Typically, subset models interpret a richer language containing a second modal- 
ity representing "effort" which, intuitively, works by shrinking the epistemic 
range. We return to this point in Section [3] 

We are interested in interpreting VAC in subset space semantics. Given a subset 
model X = {X, 0,v), WA propose to define the "updated model" 971' of ([T]) that 
arises in the interpretation of public announcements by simply restricting the 
epistemic range: 

X,x,0^[^]^ iff X,x,0 ^ pre{ip) ^ X,x,(\ip\)'=' ^ ^p, 

where 

fl^|)°:={yeO : X,y,0\^ip}, 

called the truth set of f under O. Of course, in order for X, x, (\ip\)'~' \= ip to 
make sense, we must have x G d'/'l)'^ G O, and this is precisely what is taken to 
be the precondition for the announcement: 

X,x,0^ pre((^) iff a; e (\ip\)° e O. 

These semantics represent public annoucements without the need to consider 
alternative models, thus elegantly realizing the central insight of WA in [T]. 
Clearly, this interpretation of pre{tf) strengthens the classical precondition (that 
if merely be true at the state in question). However, we will see that this 
precondition is, in a sense, too strong, and moreover that the "updated model" 
thereby produced is, in a sense, too weak. 
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1.2 Motivation 



For pre((^) to hold in an epistemic scenario (x, O) two conditions must be sat- 
isfied. First, X must be in (|</j|)'^, which amounts simply to the subset space 
analogue of the classical precondition, namely that (x, O) |= ip. Second, we 
must have (\ip\)^ € O. Informally speaking, this condition has nothing to do 
with the state x itself, but rather is concerned with the overall "shape" of ip 
under O. 

Consider, for example. Figure [T] Think of X as a subset of the Euclidean plane. 
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Figure 1: Non-locality of pre((p) 

and let O consist of those subsets of X that are open in the inherited topology. 
This yields the subset space (X,0). Dashed lines in this diagram represent 
open sets; in particular, we are interested in the epistemic scenario (x, O). 

First suppose that Lp is some formula such that (\ip\f = [/, where U denotes 
the shaded region. Since C/ G O, we can deduce that (x, O) |= pre(i^). On the 
other hand, if ip also happened to be true (under O) at the point ?/, so that 
^>p>\f-^ = J7 U {y}, then since U U {y\ ^ O we must conclude that ip cannot be 
announced at x; that is, (x,0) ^ pre((p). Thus, although the precondition for 
announcing ip is in some sense locally satisfied at x (by the set U), it can be 
ruined by non-local properties of ip, such as whether or not ip holds at the point 
y. This makes pre{(p) a strong requirement indeed. 

For a more concrete example, consider Figure [2] Once again, we view X as a 
subset of the plane to form the subset space {X, O). Think of X now as a room 
into which you have launched a probe, but you don't know exactly where the 
probe has landed. There is a target in the room as well as a wall. From certain 
vantage points, the wall blocks the target; A denotes the set of points where 
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Figure 2: The target and the waU 

this is so. Notice that A is a closed subset of X. We might think of A as the 
truth set of a primitive proposition a that says "the wall is blocking the target". 

Now suppose that the probe in fact landed at the point x, but you consider 
it possible that it is anywhere in the room. This corresponds to the epistemic 
scenario {x, X). At the point x, the wall is in fact blocking the target. However, 
according to the theory of public announcements we have reviewed, this fact 
cannot be announced. Despite the fact that a is true at x, and that a could 
even be known with sufficient effort]^ we must have {x, X) ^ pre(a) simply 
because (|ap = A<^0. 

But once again, intuitively, the fact that A is not open is not "local" to the point 
X, in the sense that there exists a neighbourhood about x (e.g. U) on which A 
"looks" open. The same cannot be said, for example, about the point y. All 
this can be formalized quite succintly: x lies in the interior of A, while y does 
not. 

Before moving on to the formal details of the revised subset space semantics 



for public annoucements given in Section 2.1 we consider one final example 
of a rather different sort. Consider the following scenario. You have learned 
(from ancient historical records) of the existence of a secret tomb within which 
was supposedly ensconced a priceless jewel. Now, you have no idea whether 
a priceless jewel was, in fact, placed within this tomb before it was sealed — 
perhaps that part of the historical record was simply an embellishment. You 
are also unsure as to whether this tomb is still lost or has been rediscovered in 



^For example, effort resulting in restricting the epistemic range to the open set U. Perhaps 
the probe can return measurements of its distance from the south and east walls, albeit with 
some margin of error. 
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modern times and its contents catalogued. So we can represent your uncertainty 
with a four state model X = {sjd, Sjq, sjd, sjq} encoding whether the tomb 
actually contains a jewel (J) or not (J), and whether it has been rediscovered 
in modern times (D) or not (D). 

Crucially, however, we would also like this model to encode the fact that the 
only way to learn about the jewel is to discover the tomb (all other records of 
the jewel's existence, or the lack thereof, having been irrevocably lost to time). 
As such, we define the set of legal information sets O C 2^ with this in mind. 
You could conceivably know whether or not the tomb has been discovered in 
modern times, and, if you know it has been, you might also know whether or 
not a priceless jewel was found inside. But that's all: 

O := {X, {sjd,sjd}, {sjQ, Sjd}, {sjd}, {sjd}, 0}- 

Let j and d be primitive propositions standing for "the jewel is in the tomb" 
and "the tomb has been discovered" , respectively, and let v : {j, d} — >• 2^ be 
defined in the obvious way. Then it is easy to see that for all epistemic scenarios 
{x, O), we have (a;, O) ^ pre(^j A ^d), simply because {s j^,} ^ O. Indeed, this 
corresponds to the intuition that one could not in principle know that the jewel 
is not in the tomb without also knowing that the tomb has been discovered (and 
that the jewel was not inside!). In particular, such a state of affairs should not 
be announceable. 

However, it is also easy to see that {sjd,X) ^ pre(j); this follows from the fact 
that {sjD,Sji)} ^ O. Thus, "the jewel is in the tomb" is not announceable. 
This seems wrong — rather than denying the announceability of j altogether, 
intuitively, an announcement of j should carry with it the implication that the 
tomb has indeed been discovered. In other words, we should expect [j]d to 
be valid. The semantics WA provide cannot give credence to this intuition: 
announcements act by restricting the epistemic range to the truth set of the 
announced formula, and so no inference beyond the truth of that formula (and 
all the logical consequences thereof) is supported. 

2 Revised semantics 
2.1 Definition and intuition 

Given a topological spac^A" = {X,0), let int^ 2^ ^ O denote the topologi- 
cal interior operator; namely, intxiA) returns the largest open set contained in 
A. To ease notational clutter, we often drop the subscript and sometimes omit 
the parentheses. 

subset space {X, O) is a topological space provided O is closed under unions and finite 
intersections. 
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The central intuition of this paper is that the precondition for an announcement 
should not depend on the "global shape" (i.e. the truth set) of the announced 
formula, but rather on its "local shape" . This intuition is borne out in the 
following reformulated semantics for public announcements: 

A',x,0 h iff X,x,0 ^\nt{(p) ^ X,x,int(\ip\)'^ \='4>, 

where 

X,x,0 [^\nt{ip) iff X e int(\ip\)^ . 

To distinguish subset semantics for VAC as presented in [T and outlined in 
Section |1.1| from that given here, we refer to them as "pre-subset semantics" 
and "int-subset semantics", respectively. It is easy to see that \r\t{(p) is a strictly 
weaker condition than pre{ip) and a strictly stronger condition than ip. 

Returning to the example of Figure [l] we can see that 'int{(p) holds at x (and 
not at y) regardless of whether (|(p|)'^s equal to J7 or to J7 U {y}. Similarly, in 
the target and wall example, it is easy to see that ip can be announced at x, 
though not at y. These observations are direct consequences of the fact that 
the precondition for announcing ip in the epistemic scenario (x, O) depends now 
only on the local behaviour of the set d'/?])'^. 

Furthermore, int-subset semantics not only weakens the precondition for an an- 
nouncement, but also narrows the resulting epistemic range; an announcement 
of ip in the epistemic scenario {x, O) has the effect of restricting the epistemic 
range to int(\Lp\)^ rather than just (Ifisl)*^. Thus, in int-subset semantics, but not 
pre-subset semantics, the "updated" epistemic range of a successful announce- 
ment of if may be strictly smaller than the truth set of ip. 

This allows a representation of situations where, intuitively, an announcement 
conveys more information than just the announced formula. Consider again 
the example of the jewel in the tomb. As with pre-subset semantics, int-subset 
semantics determines that —^jA—^d is not announceable in any epistemic scenario; 
this follows from the fact that "intdsjf)}) = 0. By contrast, j is announceable 
in the epistemic scenario {sju, X) because int{{sjD, Sjq}) — {sjd}', moreover, 
it is easy to see that {sjd,X) \= [j]d for precisely the same reason. 

In an arbitrary subset space {X,0), of course, there is no guarantee that for 
a subset A C X there is a largest set O G O contained in A. For the interior 
operator to be well-defined, we must make this assumption, which amounts to 
assuming that {X, O) is a topological space (provided we want the interior oper- 
ator to behave nicely). Henceforth, whenever we consider int-subset semantics, 
we implicitly assume that the subset models are in fact topological spaces. 

2.2 Technical results 

As in [1], it is straightforward to check that \nt{ip) is definable in VAC by 
^[(/9]_L. The properties of a modalized interior operator have been thoroughly 
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investigated (see, e.g., [2]), so much of the following proposition should come as 
little surprise. 

Proposition 2.1: For all (p,ijj £ VAC, the following hold: 

(a) h int((^) ^ if 

(h) ^ \nt{if>) int(int((^)) 

(c) \nt{ip ip) ^ (int((^) int('(/))) 

(d) \^ ip implies 1= int((^) 

(e) 1= Kip \nt{ip) 

(f) ^ int((^) ^ ^ int(^)) 

-(^ ^ int((/3)) ^ X-int((p). 

Proof: (a) through (d) constitute a standard S4 axiomatization of the interior 
operator, and the proof that they hold in this setting is analogous to the classical 
proof, (e) follows from the fact that 

^ int(\^\f = O. 

(f) and (g) are included to exhibit some of the differences between pre{(p) (for 
which these two schemas are valid) and Intjjp). A counterexample demonstrating 
both (f) and (g) can be found in Figure 111 take (Ivl)*^ — U U {y} and consider 
the epistemic scenarios (x, O) and (y^O), respectively. I 

Like pre-subset semantics, int-subset semantics does not collapse VAC and EC. 

Theorem 2.2: VAC is strictly more expressive than EC in int-subset seman- 
tics. 

Proof: As in [Tl Theorem 10], it suffices to show that int(p) can distinguish two 
subset models that are partially bisimilar. Consider two subset models 

X = i{x,yh2i-'y\v) 

and 

y = i{x,y},2i-^y^-{{x}},v) 

with v{p) — {x}. Thus A" is a discrete space while in y the singleton set {y} is 
open but {a:} is not. The relation 

{x,{x,y}) {x,{^,y}) 

{y,{x,y}) {y,{x,y}) 
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reveals that (A", x, {x, y}) {y,x,{x,y}). However, X,x,{x,y} \= int(p), 
since 

x^{x} = intx{{x}) = ^n^;t^p|)^"■"^ 
whereas y, x, {x, y} ^ int(p), since 

Hence, int(p) cannot be equivalent to any f £-formula. | 

We also obtain an analogue to the reduction schemas of [T, Theorem 11]. 

Theorem 2.3: The following V AC-formulas are valid (where p e PROPj; 

[ip]± ^ ^\nt{ip) [ip]{^PAx) ^ [lp]'4' A [ip]x 

[(p]p O \nt{(p) ^ p ['P]Kip O \nt{(p) K[ip]ip 

^ int(^) ^ [(pMx ^ [int((p) A [<y9]int(V')]x- 

Proof: The first four equivalences are straightforward to prove. To see that 
[Lp]Kip o {\nt{(p) — > K[(p]ip) is valid, first note that if x,0 |^ int((p) then this 
equivalence holds trivially at (x,0). Otherwise, assuming that x,0 \= \nt{ip), 
we have: 

X, O h [v]K^J ^ X, int(\ip\)'^ h K^J 

^ {yyGtnt(\^\)''){x,tnty\f\=i;), 

whereas 

x,0 \= \nt{if) ^ K[(p]ip ^ x,0\=K[if]ij 

^ (VzeO)(z,OhMV) 

To see that [<y5]['i/']x ^ [int((/3) A [(y5]int(-!/))]x is valid, first observe that 
X, O h MMX ^ e ^nt{\^\f ^ X, tnt(\^\)0 |= [V-lx 

^ X e m^dv^"*^'^^'' =^ X, zTit^VI)'"*^'''^'' 1= X, 

where the last line follows from the fact that 

in^dV'^"*^*'!^'' C dV'l)'"*^^"'' C int(\ip\)'^. (2) 
On the other hand, x,0 \= [\nt{ip) A [(^]int(-0)]x iff 

X e mt(|int(93) A [(^]int(-0)|)° =^ x, mt(|int(^) A [ip]\nt{ip)\)° |= x; 
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thus, to complete the proof it sufhees to show that 

inti\\nti^) A [ip]\ntii;)f = • (3) 

By definition, 

^int(vj) A [ip]\ntiij)\f = {yeO : y,0\= \nt{ip) A [(/?]int(V')} 
= {y e O ■■ y e int(\^p\)^ and 

= {ye Jntfl^^o : y,int(\ip\)'' h int(V'))} 



where the third hne foUows from the fact that inti 
follows from B. Since int'^ ~ int, this establishes (|3|). | 



C O, and the last line 



Finally, we turn our attention to a sound and complete axiomatization of VAC 
in int-subset semantics. As in [1], we first focus on a restricted language and 
then extend our results to VAC by means of Theorem |2.3[ 



Let £C\n\. be the language recursively generated by the grammar 

ip ■.■.= p\^Lp\ip ALp\Kip \ \nt{ip), 

where p G prop. Let CPL denote the axioms and rules of classical propositional 
logic, let S4jnt denote the S4 axioms and rules for the int modality, and let 
KD45j<- denote the KD45 axioms and rules for the K modality. Let (KI) denote 
the axiom scheme Kip \nt{ip), and set 

ELint CPL + S4int + KDA5k + (KI). 

Theorem 2.4 : ELint is a sound and complete axiomatization of EC^t with 
respect to \nt-subset semantics. 

Proof: Soundness of CPL + KD45/f is easy to show in the usual way, while 



soundness of S4jnt + {Kip — > \r\t{ip)) follows from Proposition 2.1 



Completeness can be proved by a relatively straightforward canonical model 
construction. Let X denote the set of all maximal consistent subsets of £C\nt- 
Define a relation ^ on X by 

x^y ^ {ype£C'"^){Kipex^Kipey). 

Clearly is an equivalence relation; let [a;] denote the equivalence class of x 
under ~. These equivalence classes partition X according to what is known, 
but we cannot simply take the set of epistemic ranges to be {[x] : x G X}^ 
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since we require this set to be a topology on X and to interact with the int 
modahty in the appropriate way, that is, to support its interpretation as the 
interior operator. So we need to do a bit more work to define O. 

Given ip e SCmt, \et (p :— {x £ X : ip £ x}. Roughly speaking, the collection 

{\nt{ip) : ip £ ££int} 

are the sets that int "thinks are open". Thus, in order to respect both int and 
K, we define 

B := {int((^) n [a;] : G SCmt and x G X], 

and let O be the topology generated by B. In fact, it is not difficult to show 
(using S4int) that S is a basis for Oj^ 

Finally, for p G PROP, set v{p) := p. Let X = {X, 0,v). 

Lemma 2.5: For every p> G £C\„i, for all x G X, p Cz x ijf X,x, [x] \^ ip. 

Proof: First we note that int(T) = X, and thus for all a; G X we have [x] G O, 
so (x, [x]) is indeed an epistemic scenario in X. 

As usual, the proof proceeds by induction on the complexity of ip. The base case 
holds by definition of v, and the inductive steps for the Boolean connectives are 
straightforward. 

Suppose the result holds for (p; we first show that it also holds for Kip. If 
Kip G X, then by definition of ^ we know that (Vy G [x]){Kip G y). But 
Kip € y ^ ip (z y, so (Vj/ G [a;])(<y9 G y), which by the inductive hypothesis 
imphes that (Vy G [y]) |= ip). Since [y] — [x], this is equivalent to 

(Vy G [a;])((y, [x]) |= p), which yields (x, [x]) \= Kp. 

For the converse, suppose that Kip ^ x. Then {Kij} : Kil) G x} U {^ip} is 
consistent, for if not there is a finite subset F C {K'^l} : Kip G x} such that 

^ A ^ ^ 

from which it follows (using KD45if ) that 

h f\x^Kip, 

which implies Kip G x, a contradiction. Therefore, we can extend {Kip : Kip G 
x} U {^p} to some y d X; hy construction, we have y G [x] and ip ^ y. This 
latter fact, by the inductive hypothesis, yields (y, [y]) |^ ip and thus (y, [x]) |^ ip 
(since [x] — [y]), whence {x, [x]) |^ Kip. 

•^B is a basis for topology O if every element of O is a union of elements of B. 
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Suppose again that the result holds for ip; we show now that it also holds for 
int((/3). If int((/?) G x, then observe that 

X e \nt{tp) n [x] 'Z{ye[x]:ipe y}; 

this is an easy consequence of the fact that h int(<y9) — ^ ip. Since \nt{(p) D [x] is 
open, it follows that 

X e int{{y £[x] : ip e y}). (4) 
Now by the inductive hypothesis we have 

{ye[x]:pey} ^ {ye [x] : {y, [y]) |= ip} 
= {ye [x] : {y, [x]) 1= (p} 

which by Q yields x € int(\ip\)^^\ hence (x, [x]) |= \r\t{p). 

For the converse, suppose that (x, [x]) \= int(i^). Then x G int(\p\)^^^ which, as 
above, is equivalent to x G int{{y G [x] : </? G y}). It follows that there is some 

basic open set \nt{i/j) n [z] such that 

X G i^r^) n [z] C{ye[x] : pG y}; 

of course, in this case it must be that [z] = [x\ . This implies that for all y G [x] , 
if int(?/;) G y then (fi G y. From this we can deduce that 

{KiP' : K^P' G x} h int(V') ^ p>, (5) 

for if not, then {Kip' : Kip' G a;} U {^(int(V') — > p)} is consistent, in which case 
it can be extended to a ?/ G [x] with int(V') G y but p ^ y, a contradiction. 

By (|5|, we can find a finite subset T C {Kip' : Kip' G x} such that 

h /\ (int(^) -> (p), 
xer 

which implies (using KD45a') that 

h /\ x^if(int(V') ->(^). 

Thus K{ir\t{ip) — >■ </?) G X, so by (KI) we know also that int(int('(/') p) & x, 

from which it follows (using S4;nt) that int('0) — )■ \nt{p) G x. Since a; G 'int{ip), 
we conclude that ir\t{p) G as desired. | 

Completeness, of course, is an easy consequence: if p is not a theorem of ELjnt, 
then {^p} is consistent and can be extended to some x € X, in which case by 



Lemma 2.5 we have X,x, [x] |^ p. 
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Let PALint denote ELint together with the six reduction schemas given in Theo- 
rem 2.3 That these reduction axioms are not circular follows directly from ^ 
Proposition 23]. 



Corollary 2.6: PALi^t is a sound and complete axiomatization of VAC with 
respect to \nt-subset semantics. 

3 Discussion 

By an appeal to topology, we obtain an interpretation of public announcements 
in subset spaces that is less restrictive than the account provided by WA in [1]. 
In particular, more formulas are announceable, and as we have seen by example, 
some of these formulas really ought to be announceable. 

This framework also allows us to capture epistemic implications of announce- 
ments that are not themselves encoded as logical tautologies. Subset spaces 
already encode such implications in the set O of legal epistemic ranges; the pres- 
ence of the interior operator in the definition of a post-annoimcement update is 
precisely what allows these implications to affect post-annoucement truth. 

It is interesting to note that the interior operator in subset spaces plays a role 
very similar to the notion of "knowabilty" . Let SSL be the language recursively 
generated by the grammar 

(fi ::— p I ^ip \(p A ip \ Kip \ Oip, 

where p G prop. The diamond modality is interpreted as the "effort" alluded 
to in Section [TTTJ 

X,x,0[^Op iff {30' eO){xeO' CO and X,x,0' \^ip). 

In particular, the formula OKip can be read "(p is knowable" , and the corre- 
sponding semantic operation is similar to taking the interior. An investigation 
of the interaction between OK and int in the context of interpreting public an- 
noucements in subset spaces is of interest in this regard, and the topic of current 
research. It is worth noting that the canonical model constructed in Theorem 
|2.4[ which trivializes the Boolean structure of O, will not work in the context 
of a modality like O. 
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